CISO Panel Discussion
Insightful discussion on building and scaling top security teams, exploring strategies for talent attraction, retention, and overcoming challenges in the cybersecurity industry.
Hook, Line and Sinker - Pillaging API Webhooks
Explore "Webhook Boomerang flaws" and learn how to exploit SSRF vulnerabilities in API webhooks, potentially compromising cloud credentials despite security measures.
Exposed Secrets - How Public Git Repositories and Docker Images Expose Millions of Secrets Like API Keys and Security Certificates Every Year
Uncover the alarming spread of exposed API keys and secrets in public repositories. Learn about research findings, causes, and implications for cybersecurity.
The Power of Guardrails - How to Slash Your Risk of XSS in Half
Discover how secure code defaults can significantly reduce XSS vulnerabilities and elevate overall security. Learn strategies to implement effective guardrails and minimize recurring security risks.
Ooga Booga - Avoiding Reinvention of the Wheel - Useful Security Tools and Lessons to Know
Discover Marie Kondo-inspired techniques for managing security challenges efficiently. Learn about useful tools and lessons to avoid reinventing the wheel in under-resourced security teams.
Practical Threat Hunting With Machine Learning
Explore practical applications of machine learning in threat hunting and detection, featuring case studies of high-value detections from two years of research and implementation.
An Unlikely Friendship - Why Security Engineers and Product Managers Should Be Working Together
Discover strategies for security engineers to collaborate with product managers, enhancing security features, accelerating team growth, and unlocking revenue from security-conscious customers.
Read the Fantastic Manual - Writing Security Docs People Will Actually Read
Strategies for creating effective security documentation that people will read and use. Covers identifying needs, iterative creation, and measuring success in technical writing.
Go With The -Work-flow
Unveiling security risks in cloud workflow platforms: misconfigurations, credential exposure, data leakage, insecure coding, and containerized malware. Eye-opening research for IT professionals.
Embracing Risk Responsibly - Moving Beyond Inflexible SLAs and Exception Hell by Treating Security Vulnerabilities and Risk Like Actual Debt
Discover how to treat security vulnerabilities as debt, moving beyond rigid SLAs and exception overload. Learn strategies for responsible risk management in cybersecurity.
Biohacker - The Invisible Threat
Exploring the emerging threat of biohacking: how human implants can compromise contactless technology and pose risks to physical and digital security systems.
Redefining Threat Modeling - Security Team Goes on Vacation
Discover innovative approaches to scale threat modeling programs without compromising quality. Learn strategies for efficient security practices that empower teams and enhance overall effectiveness.
CTF Writeup - Log 'em All
Detailed walkthrough of a challenging Hacking/Reverse Engineering CTF challenge inspired by a Pokemon Red bug, with step-by-step instructions for setup and execution.
Offensive Javascript Techniques for Red Teamers
Explore advanced JavaScript techniques for network reconnaissance and exploitation, focusing on rapid execution and targeting internal vulnerabilities from external sources.
How Software Transparency Can Help Save the World
Explore software transparency through SBOMs, enhancing vulnerability management and supply chain visibility. Learn how this approach can revolutionize cybersecurity and software development practices.
A Look at Jython-Enhanced Reverse Engineering with Ghidra
Explore Jython scripting in Ghidra for efficient malware analysis, using real-world examples to enhance reverse engineering techniques and streamline the process of analyzing obfuscated binaries.
Dispatch - Crisis Management Automation When Everything is On Fire
Explore Dispatch, an automation tool for crisis management lifecycles, streamlining incident response from initial report to post-incident review.
Leveraging Osquery for DFIR at Scale
Explore efficient incident response using Osquery for digital forensics, accelerating breach investigations and uncovering attacker breadcrumbs in large-scale environments.
Engineering My Way Into InfoSec
Explore one engineer's journey into InfoSec, covering education, certifications, challenges, and strategies for success in the field. Gain insights on networking, mentorship, and personal growth.
Sex, Secret and God - A Brief History of Bad Passwords
Explore the evolution of password security, common pitfalls, and best practices for creating strong, memorable passwords in this informative cybersecurity talk.
Transfer Learning - Analyst-Sourcing Behavioral Classification
Explore advanced threat detection using AI and transfer learning techniques. Learn about active learning, data sharing, and improving phishing domain detection across organizations.